Last week I noticed some rogue characters showing up on the index page. I found a couple of lines in the header.php file that caused the code. Also in there was a ill formed link to mytaxhelpattorneys.com Anyway...removed that and all was fine. Over the weekend, the same thing happened. This time I couldn't log in to WP.... the site was giving a php error on line 419 in the wp-login.php file. I uploaded a new copy of wp-login.php and fixed that. Then, I found the same rogue code/characters with freaking tax attorneys link in a number of php files. I've removed everything that I've found but the index still won't display beyond the header area. The rest of the site seems to run fine.
I've installed a couple of plugins to secure the site so hopefully I won't have to deal with this again...once I've fully recovered.
I would really welcome suggestions.